Fix saved searces, news updates, ip bans being dumped to BigQuery.

Prevent saved searches, news updates, and ip bans from being publicly
dumped to BigQuery. They didn't override the `visible` method to
restrict their visibility for anonymous users.
This commit is contained in:
evazion
2021-03-10 02:25:56 -06:00
parent f235b72b3f
commit b169d60f64
7 changed files with 38 additions and 4 deletions

View File

@@ -1,9 +1,9 @@
class NewsUpdatesController < ApplicationController
respond_to :html
respond_to :html, :json, :xml
def index
authorize NewsUpdate
@news_updates = NewsUpdate.order("id desc").paginate(params[:page], :limit => params[:limit])
@news_updates = NewsUpdate.visible(CurrentUser.user).paginated_search(params, count_pages: true)
respond_with(@news_updates)
end